Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft
File:                     aWkfVRZJUvL08f7oBKoVg1_-htU.mft (raw, json)
Hash identifier:          Iwy9qYO16oDnCe3k5E9nGVkHoms6n+tAlcMxk4+gdhw=
Subject key identifier:   62:33:36:9E:DD:FF:46:D1:95:94:8B:74:CF:73:53:AE:5A:99:4E:C0
Authority key identifier: 69:69:1F:55:16:49:52:F2:F4:F1:FE:E8:04:AA:15:83:5F:FE:86:D5
Certificate issuer:       /CN=A91A618B/serialNumber=69691F55164952F2F4F1FEE804AA15835FFE86D5
Certificate serial:       0AC9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWkfVRZJUvL08f7oBKoVg1_-htU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft
Manifest number:          0AC1
Signing time:             Sun 20 Sep 2026 19:23:10 +0000
Manifest this update:     Sun 20 Sep 2026 19:23:09 +0000
Manifest next update:     Sun 27 Sep 2026 19:23:09 +0000
Files and hashes:         1: aWkfVRZJUvL08f7oBKoVg1_-htU.crl (hash: MJp1FOAWVkSeumO7jF7tA4UI3OdoWjLKzwRwJSXD26k=)
                          2: 594ECE96804011EA9B73BC62C4F9AE02.roa (hash: UHf93WQV3i4ARPzi/pu+UB53941OBZiuvVBenRV6yUA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.crl
                          rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWkfVRZJUvL08f7oBKoVg1_-htU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 19:23:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2761 (0xac9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A618B, serialNumber=69691F55164952F2F4F1FEE804AA15835FFE86D5
        Validity
            Not Before: Sep 20 19:23:09 2026 GMT
            Not After : Sep 27 19:23:09 2026 GMT
        Subject: CN=6ab0329e-8138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:41:cf:52:e7:fc:09:c7:9b:73:70:3c:d1:3b:
                    e1:c1:16:41:9c:e0:88:0a:be:84:b3:cc:bf:a3:c1:
                    42:38:d5:95:2d:6c:7a:6c:5e:14:ff:67:68:7c:24:
                    f6:3e:cb:11:47:68:08:99:e7:bd:a7:60:73:20:e3:
                    b0:78:94:a1:cc:01:8e:83:36:5a:0d:14:8d:76:8e:
                    5b:85:2c:77:9e:d1:e8:4e:31:80:93:7e:06:0b:bf:
                    41:2e:bb:84:79:30:12:a9:23:2a:c8:f1:c0:82:cd:
                    39:09:17:76:f8:dd:31:8d:13:72:1b:9e:e4:52:37:
                    be:9c:18:15:55:e9:af:07:d3:b6:c0:3b:a3:19:45:
                    75:28:f4:3b:5f:8d:29:9a:6f:ac:34:3e:11:08:9d:
                    f2:f1:f1:97:c5:36:a7:d2:61:40:97:f7:36:ec:f5:
                    b7:d1:1c:40:b7:bb:bd:87:a2:b8:1b:48:b9:9b:91:
                    a1:5f:36:e5:bb:f7:83:87:3c:ec:3e:30:b2:e5:20:
                    6e:7e:fa:cf:e3:7d:8c:fe:79:9b:4b:44:c8:79:3e:
                    3b:e9:f3:1d:ce:4a:7b:81:fe:4d:8e:d7:a3:f4:6f:
                    98:35:ca:d5:67:5a:5e:cb:ce:f6:eb:47:fa:cb:f0:
                    c9:21:2c:11:57:da:aa:76:95:71:f0:f8:da:43:f5:
                    aa:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:33:36:9E:DD:FF:46:D1:95:94:8B:74:CF:73:53:AE:5A:99:4E:C0
            X509v3 Authority Key Identifier:
                keyid:69:69:1F:55:16:49:52:F2:F4:F1:FE:E8:04:AA:15:83:5F:FE:86:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWkfVRZJUvL08f7oBKoVg1_-htU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:3a:14:68:1c:0c:b0:f2:f1:87:ac:6f:eb:55:d4:4d:4a:9b:
         98:9c:e7:3b:02:95:5a:11:a6:c5:6a:19:ba:5e:f3:92:05:8b:
         77:6e:44:af:00:81:a3:ff:eb:77:64:f0:e8:20:2c:92:ae:0e:
         bd:c0:8b:22:97:0d:5b:a7:a5:cf:08:2f:3f:11:d4:9b:9a:ad:
         58:09:a7:be:b7:6a:d3:b4:d2:6d:c8:03:92:f8:0f:0d:16:76:
         e9:d0:f7:64:ba:6f:ba:33:6b:ca:a3:30:49:10:c6:4f:be:54:
         d9:ff:93:f4:48:0c:10:43:a3:f9:66:80:b1:5e:19:97:09:8a:
         39:25:6b:9b:cb:cf:e4:67:78:c9:4c:c7:67:31:fb:d8:c2:e5:
         8e:5b:60:30:c5:2d:2e:b1:a2:fc:16:e6:2c:44:fd:07:40:0a:
         da:c0:f9:3e:dc:60:da:f2:ee:dc:62:9f:2f:65:d7:38:64:fa:
         a9:f6:19:b8:44:c5:3a:5f:36:8f:c3:31:17:a4:c0:b1:e0:ba:
         59:79:83:ee:7f:56:77:d3:c5:dd:e6:9d:69:e9:ed:4b:a4:8d:
         10:52:bf:9f:6f:30:5e:e0:d2:84:48:ca:9c:82:18:07:81:85:
         fa:57:c0:06:b1:44:6d:4e:b2:a4:14:63:2d:e0:be:60:fd:d7:
         eb:44:ac:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:18:20 2026 by rpki-client